CVE-2020-8927 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2020-8927

CVE-2020-8927

September 15, 2020

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

Affected Packages

brotli (CONAN):

Affected version(s) =1.0.7 <1.0.9

Fix Suggestion:

Update to version 1.0.9

microsoft.netcore.app.runtime.win-arm (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.mono.browser-wasm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvos-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.osx-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.win-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.iossimulator-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-x86.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-arm64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.aot.osx-x64.cross.android-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-arm (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.win-x86 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.tvos-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.linux-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.android-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.ios-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.aot.linux-x64.cross.android-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-x64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.win-x86 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.mono.tvossimulator-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.win-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.android-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x86.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-x64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.browser-wasm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.linux-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.linux-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.iossimulator-x86.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-x64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.mono.linux-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.aot.osx-x64.cross.maccatalyst-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.browser-wasm.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.linux-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.aot.linux-x64.cross.android-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.browser-wasm (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.aot.win-x64.cross.android-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.linux-x64.cross.android-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvos-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.aot.osx-x64.cross.iossimulator-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.osx-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.win-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.iossimulator-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.osx-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.osx-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.android-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-musl-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.tvos-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-x86.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.linux-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.linux-x64.cross.android-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.tvossimulator-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-x64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x86.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-x64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.maccatalyst-x64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.browser-wasm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.iossimulator-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-arm64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.osx-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.osx-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.linux-musl-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.android-arm.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-x64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.linux-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.linux-x64.cross.browser-wasm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.linux-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.osx-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.win-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.browser-wasm.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-x64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.browser-wasm.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.android-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.maccatalyst-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.tvossimulator-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.browser-wasm.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.win-x64.cross.android-arm.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.aot.osx-x64.cross.ios-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.linux-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.iossimulator-x64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.osx-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-musl-x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.llvm.aot.linux-arm64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.linux-musl-arm (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.osx-x64 (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.win-x64 (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.mono.ios-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.linux-arm (NUGET):

Affected version(s) >=3.0.0 <3.1.23

Fix Suggestion:

Update to version 3.1.23

microsoft.netcore.app.runtime.mono.linux-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-arm (NUGET):

Affected version(s) >=5.0.0 <5.0.15

Fix Suggestion:

Update to version 5.0.15

microsoft.netcore.app.runtime.mono.tvos-arm64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.maccatalyst-x64.msi.arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-arm64.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.win-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-x86.msi.x64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.iossimulator-arm64 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.tvossimulator-arm64.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.ios-arm (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

microsoft.netcore.app.runtime.mono.android-x86.msi.x86 (NUGET):

Affected version(s) >=6.0.0 <6.0.3

Fix Suggestion:

Update to version 6.0.3

brotli (PYTHON):

Affected version(s) >=0.5.2 <1.0.8

Fix Suggestion:

Update to version 1.0.8

compu-brotli-sys (RUST):

Affected version(s) >=0.1.0 <1.0.9

Fix Suggestion:

Update to version 1.0.9

Related Resources (41)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP

https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6

https://rustsec.org/advisories/RUSTSEC-2021-0132.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00108.html

https://github.com/bitemyapp/brotli2-rs/issues/45

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6

https://github.com/google/brotli/releases/tag/v1.0.8

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I

https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2020-29.yaml

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/

https://github.com/github/advisory-database/issues/785

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/

https://crates.io/crates/compu-brotli-sys

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6

https://access.redhat.com/security/cve/CVE-2020-8927

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4VCDOJGL6BK3HB4XRD2WETBPYX2ITF6/

https://nvd.nist.gov/vuln/detail/CVE-2020-8927

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH

https://usn.ubuntu.com/4568-1/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMBKACMLSRX7JJSKBTR35UOEP2WFR6QP/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W23CUADGMVMQQNFKHPHXVP7RPZJZNN6I/

https://rustsec.org/advisories/RUSTSEC-2021-0131.html

https://usn.ubuntu.com/4568-1

https://lists.debian.org/debian-lts-announce/2020/12/msg00003.html

https://github.com/bitemyapp/brotli2-rs

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4E265WKWKYMK2RYYSIXBEGZTDY5IQE6/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/356JOYTWW4BWSZ42SEFLV7NYHL3S3AEH/

https://github.com/google/brotli/releases/tag/v1.0.9

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WW62OZEY2GHJL4JCOLJRBSRETXDHMWRK

https://www.debian.org/security/2020/dsa-4801

Do you need more information?

CVSS v4

Base Score:

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

LOW

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

CVSS v2

Base Score:

6.4

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Weakness Type (CWE)

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-120

Improper Handling of Length Parameter Inconsistency

CWE-130

EPSS

Base Score:

0.32

Products

Solutions

Resources

Company

Compare

Developer Tools